This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/34352e3232382e3233342e302f32332d3234203d3e203532343638.roa
File:                     34352e3232382e3233342e302f32332d3234203d3e203532343638.roa (raw, json)
Hash identifier:          wzy5CrR/u2qicY4RLq7ax1iuqmZEqLgagy3pDgsd2Js=
Subject key identifier:   B6:B9:F6:A7:F2:5B:7D:A0:24:06:34:66:96:EF:17:75:E8:79:16:C3
Certificate issuer:       /CN=F04E62F42E8C754132C4137521873CFCE3C2BB48
Certificate serial:       279A4B19F504F7BE14D61E254B7BABC31AEA94A8
Authority key identifier: F0:4E:62:F4:2E:8C:75:41:32:C4:13:75:21:87:3C:FC:E3:C2:BB:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/34352e3232382e3233342e302f32332d3234203d3e203532343638.roa
Signing time:             Mon 17 Nov 2025 18:55:00 +0000
ROA not before:           Mon 17 Nov 2025 18:50:00 +0000
ROA not after:            Mon 16 Nov 2026 18:55:00 +0000
asID:                     52468
IP address blocks:        45.228.234.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 09:05:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:9a:4b:19:f5:04:f7:be:14:d6:1e:25:4b:7b:ab:c3:1a:ea:94:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F04E62F42E8C754132C4137521873CFCE3C2BB48
        Validity
            Not Before: Nov 17 18:50:00 2025 GMT
            Not After : Nov 16 18:55:00 2026 GMT
        Subject: CN=B6B9F6A7F25B7DA02406346696EF1775E87916C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:22:4f:49:71:08:14:30:45:9c:bc:c1:07:e0:
                    91:6c:fb:81:d5:ec:da:b6:83:a3:f9:2d:d6:90:69:
                    39:b6:c4:e5:ef:ab:0e:8a:7f:65:41:06:5b:4d:d1:
                    6a:74:fb:1b:ba:71:32:40:ff:5e:89:ea:bb:65:17:
                    2e:86:34:11:bc:28:60:2c:3d:59:36:29:1d:23:6b:
                    d3:46:80:b8:61:c3:56:81:4d:86:4a:7c:9c:7f:65:
                    8a:e2:40:47:a8:f5:be:a2:6e:07:94:c1:4c:c4:58:
                    0f:15:27:b4:64:fa:97:0e:b5:8f:98:13:b5:40:03:
                    e1:39:e8:89:5c:ed:ec:22:83:a5:63:0a:7e:b5:77:
                    84:0d:c2:0f:80:53:8c:0a:c0:b5:d8:ba:9e:10:0f:
                    1a:1b:c0:ef:66:88:6e:42:ba:2e:33:5e:f3:a9:eb:
                    1f:c6:08:d1:01:b8:02:fd:03:1b:5b:50:39:5b:6d:
                    94:43:b0:9d:46:b5:30:aa:fd:0f:23:3c:01:33:32:
                    f6:4a:d7:20:6f:be:2e:31:95:5d:c4:05:43:56:35:
                    59:41:c4:d0:5a:b9:6d:98:4d:e0:64:32:41:35:03:
                    3c:a8:12:dc:ce:f6:94:9a:68:a3:8b:66:16:47:53:
                    bd:90:8d:b8:89:b1:2a:45:08:45:e6:87:2e:b9:63:
                    6b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:B9:F6:A7:F2:5B:7D:A0:24:06:34:66:96:EF:17:75:E8:79:16:C3
            X509v3 Authority Key Identifier:
                keyid:F0:4E:62:F4:2E:8C:75:41:32:C4:13:75:21:87:3C:FC:E3:C2:BB:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/34352e3232382e3233342e302f32332d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:39:13:c1:46:97:6b:f3:0b:6b:9a:4e:6f:53:2e:b2:32:c5:
         31:7e:8e:04:de:66:b5:29:29:3d:73:17:b6:e1:f5:35:44:56:
         9e:97:8d:48:24:e0:e7:7a:0c:d4:51:1a:bb:41:f6:f3:f9:0f:
         28:1f:85:5b:95:f4:85:d6:7c:47:89:1d:b8:03:28:71:a4:b2:
         40:4a:d2:a6:c8:59:36:ae:40:0c:58:78:4b:3f:4d:fb:c1:51:
         bb:6c:d8:a4:f1:4f:63:c2:f1:60:2d:74:ad:5a:a7:9a:81:d6:
         d9:de:45:30:77:19:c1:f6:34:1e:5d:ab:67:12:20:0d:c7:36:
         52:0a:5b:1b:90:7d:1d:89:6e:4e:ff:0b:4f:f7:6d:1c:09:e2:
         5b:b7:43:2c:b6:a1:3e:3e:9d:1b:ac:6e:fe:e5:a3:03:6e:92:
         85:6d:4c:be:6e:7f:08:e4:09:b2:41:ad:ec:b9:dd:a9:14:0d:
         1a:78:a1:48:25:bb:08:a2:98:c0:ec:7a:c7:f5:63:36:44:36:
         bf:e7:60:20:3c:2e:35:1a:be:7c:f8:a1:21:92:3f:29:ad:ce:
         4d:db:53:20:af:c2:9b:b2:1d:ce:7d:c6:40:6f:b3:cf:6a:0a:
         0d:6e:1d:fe:a1:5d:87:ba:1c:53:58:0d:cb:b8:f2:2e:7e:6c:
         35:05:45:1a
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUJ5pLGfUE974U1h4lS3urwxrqlKgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjA0RTYyRjQyRThDNzU0MTMyQzQxMzc1MjE4NzNDRkNF
M0MyQkI0ODAeFw0yNTExMTcxODUwMDBaFw0yNjExMTYxODU1MDBaMDMxMTAvBgNV
BAMTKEI2QjlGNkE3RjI1QjdEQTAyNDA2MzQ2Njk2RUYxNzc1RTg3OTE2QzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwIk9JcQgUMEWcvMEH4JFs+4HV
7Nq2g6P5LdaQaTm2xOXvqw6Kf2VBBltN0Wp0+xu6cTJA/16J6rtlFy6GNBG8KGAs
PVk2KR0ja9NGgLhhw1aBTYZKfJx/ZYriQEeo9b6ibgeUwUzEWA8VJ7Rk+pcOtY+Y
E7VAA+E56Ilc7ewig6VjCn61d4QNwg+AU4wKwLXYup4QDxobwO9miG5Cui4zXvOp
6x/GCNEBuAL9AxtbUDlbbZRDsJ1GtTCq/Q8jPAEzMvZK1yBvvi4xlV3EBUNWNVlB
xNBauW2YTeBkMkE1AzyoEtzO9pSaaKOLZhZHU72QjbiJsSpFCEXmhy65Y2tNAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUtrn2p/JbfaAkBjRmlu8Xdeh5FsMwHwYDVR0j
BBgwFoAU8E5i9C6MdUEyxBN1IYc8/OPCu0gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85REQwOEI1NDU4M0U0MkI0Nzc2MkE0QTlCQjA0MjMyOTAx
N0ZEQjQ0NTRFQzExNDNBN0E2MjU1RDNBOTdFQjM2LzAvRjA0RTYyRjQyRThDNzU0
MTMyQzQxMzc1MjE4NzNDRkNFM0MyQkI0OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GMDRFNjJGNDJFOEM3NTQxMzJD
NDEzNzUyMTg3M0NGQ0UzQzJCQjQ4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUREMDhCNTQ1ODNFNDJCNDc3NjJBNEE5QkIwNDIzMjkwMTdGREI0NDU0
RUMxMTQzQTdBNjI1NUQzQTk3RUIzNi8wLzM0MzUyZTMyMzIzODJlMzIzMzM0MmUz
MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzUzMjM0MzYzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS3k6jAN
BgkqhkiG9w0BAQsFAAOCAQEAETkTwUaXa/MLa5pOb1MusjLFMX6OBN5mtSkpPXMX
tuH1NURWnpeNSCTg53oM1FEau0H28/kPKB+FW5X0hdZ8R4kduAMocaSyQErSpshZ
Nq5ADFh4Sz9N+8FRu2zYpPFPY8LxYC10rVqnmoHW2d5FMHcZwfY0Hl2rZxIgDcc2
UgpbG5B9HYluTv8LT/dtHAniW7dDLLahPj6dG6xu/uWjA26ShW1Mvm5/COQJskGt
7LndqRQNGnihSCW7CKKYwOx6x/VjNkQ2v+dgIDwuNRq+fPihIZI/Ka3OTdtTIK/C
m7Idzn3GQG+zz2oKDW4d/qFdh7ocU1gNy7jyLn5sNQVFGg==
-----END CERTIFICATE-----
Generated at Wed Dec 3 08:31:03 2025 by rpki-client